i made a new user on windows XP.. is there a way to have it so just that user cant access My computer or the C drive (root folder) so the user will only be stuck in there "home folder"
i found a home folder option under administion tasks--> computer management
i want this user locked out of most essential XP stuff.. is this possible for user specific only on windows?
never really looked in XP security
-bolero
there is a way b/c at school you cant do *anything*, control panel, my computer, ...
but i dont know how
Well you can go under sharing and security when you right click a folder and change the users permissions or the group permissions for the user.
Right click the folder you dont want the user to have access to, go to sharing and security, click on the security tab. From here you can choose the group this specific user is in and change the whole groups permissions or change the specific users permissions. To choose the specific user click the add button then in the new window click advanced and then in this window click find now, find the user, click ok, then ok again, and then change that users permissions. Be careful what you change because you might make that persons account practically useless and i dont know what changing the the users permissions on the windows folder might do. Test it out before you set everything in stone, it may take some time to apply the permissions.
Research what each type of permission does, just right click and ask whats this, windows gives some good information. You don't want to make it so the user can't login.
you could just hide the drive straight up using tweakui... 
what about in 'my computer' if you right click on the drive/folder... isn't there an option about sharing?
-edit- my fat fingers were too slow... chi chi up there knows what he's talking about
To have full Group/ACL control, you need WindowsXP Pro.
Home doesn't let you have full control.
i do have Windows XP pro
i just have never looked into XP security for users and wanna try this out on locking this user out of certain stuff..
-bolero
okay i found out how to set seperate permissions on users/groups
BUT now when i create a new account... i log out and go to log in with that account.. screen goes black.. flashes then goes back to the login screen.. no new account on my XP system will log in?!?!
-bolero
I told you to be careful of what permissions you change. Windows isnt letting the account read from the windows folder so its crapping out because it can't load windows properly for that user. Could you explain more what the problem is with this user accessing the files and maybe i could tell you what permissions to set so things dont get messed up.
nice SAFE way to do what you want once you get your current problem solved.
'Go into GPEDIT.msc
has every setting you could ever want to tweak
Where in gpedit can you do what hes asking? I wouldnt recommend messing around in gpedit unless you really know what youre doing. There are a lot of useful settings in there, but you can REALLY mess things up in there.
But then, by the same token, it sounds like he's managed to really mess up the system anyway 
What I would recommend, instead of going at it all "gung-ho", is to first of all get rid of all the crap that you've done so far. Then create the user, and then slowly and carefully remove access to a single directory at a time.
Alternatively, you could just make them a "Limited User". It's much quicker than pissing about with all of this rubbish, and does pretty much what you want. To do that, go into the control panel and go to the users (or whatever it's called these days) control panel, and create the user there. It gives you three default options - Admin, Power User and Limited User. Have a read of the capabilities of each one, and decide based on that.
i work for computer services in the housing department of my university, and on all the lab machines we install a program called "Fortres" (with one "s") and you can restrict use on different programs, drives, or functions in windows. im pretty sure in the program you can restrict use to "My Computer", the only problem is that the program isnt free ($59 for a single license i believe)...there is a demo at their page, but im not sure about the details and if its a crippled or time-limit demo
Originally posted by Chi Chi Rodriguez@Nov 10 2003, 01:23 AMI told you to be careful of what permissions you change. Windows isnt letting the account read from the windows folder so its crapping out because it can't load windows properly for that user. Could you explain more what the problem is with this user accessing the files and maybe i could tell you what permissions to set so things dont get messed up.
i under stand permissions and the whole concept, id rather do this in linux right now but these people have no idea what linux is.. so im stuck with XP
anyways
secondly i havnt set any permissions at all
i cant even get a normal user to log in.. i havnt even touched permissions at all on this system, that comes "after" i create and can sucessfully log in with a new user
heh so much easier with linux and chmod or chown
but thanks for the replies i appreciate any help i can get on why normal accounts cannot login
-bolero
Another one of those times where I read a few posts, but not the whole thread.
But he's a LOT worse off editting security read/write permissions then running gpedit.msc.
About the ONLY way he could fux himself up, is if he denied the ability to run gpedit.msc. Other then that, he could undo virtually anything he applied.
gpedit.msc all the way. Search about, you can find a way.
**** EDIT
mkay! took me about.. hrm.. 2 minutes
gpedit.msc
User Configuration
-> Administrative Templates
---> Windows Components
-----> Windows Explorer
--------> "Prevent Access to drives from My Computer"
*edit 2
Just applied it on my own, kept gpedit.msc (Just in case. HEH!)
Now when I try to browse to *ANY* path.
"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."
*edit 3 (quick paste for dat ass)
If you enable this setting, users cannot view the contents of the selected drives in My Computer or Windows Explorer. Also, they cannot use the Run dialog box, the Map Network Drive dialog box, or the Dir command to view the directories on these drives.
Note: The icons representing the specified drives still appear in My Computer, but if users double-click the icons, a message appears explaining that a setting prevents the action.
Also, see the "Hide these specified drives in My Computer" setting.
*EDIT 4
Ok, i admit, i'm drunk and bored. But regarding the people telling him to edit NTFS permissions and not gpedit. I work for an IT solutions provider that contracts out to various large companies. One of my accounts is IUPUI university, at which the departments install their various 2k boxes on their own. If I had a dollar for every time some stupid doctor or Dean has removed his own permissions, i'd go buy bill gates home. Editting file permissions is always a bad idea. If you have to ASK how to do it, you shouldn't be doing it. gpedit.msc is a full proof method. Merely open it up, apply something, keep gpedit.msc open, see if it did what you want, give it a good 1/2 hour of testing, if you don't like; close it. Granted; an NT administrator always has full access to re-add themself, but it can still cause problems, that aren't as easily recognized. .. shrug.. i'm done ranting, this post is entirely too long.
*EDIT 5
DAMN MY LIFE. As for your adding new user's and they can't login correctly. Reboot. 99 - 1 it fixes it. If not, Control Panel. Administrative Tools, Computer Management, Local Users, Add New User. See if that works for you.
Aqua-Soft Forums